Use comparison instead of unsigned int substraction

[StanislavGlebik]

Static security scanner highlighted this line as a potential vulnerability, since both size and written are size_t, and hence can never be less than 0.

I don't believe it it an actual issue, but size > written should achieve the same goal.